Threats tagged 'ghsa-cqv3-q8h5-83r5'

CVE-2024-56602 is a use-after-free vulnerability in the Linux kernel's ieee802154 network subsystem. The issue occurs when ieee802154_create() fails after allocating a socket (sk) object but does not clear the pointer in the associated sock object, leaving a dangling pointer. This can lead to use-after-free conditions with potential high impact on confidentiality, integrity, and availability. The vulnerability has been resolved by clearing the sk pointer on error.